KitReturn Privacy Policy

1. Scope and Application Overview

KitReturn: Equipment Loans (‘KitReturn’) is an Android equipment lending and return management app developed by VRYTIS LABS (“we,” “us,” or “our”). This Privacy Policy explains how KitReturn processes, stores, and handles data when installed on your Android device (package name: com.vrytislabs.kitreturn).

The purpose of KitReturn is to provide dependable, offline equipment, kit, checkout, and return tracking for laboratories, academic clubs, makerspaces, workshops, sports teams, and organizational equipment managers.

App-Specific Scope vs. General Website Policy:This document describes the actual data practices of the KitReturn Android mobile application. General descriptions or examples of third-party services (such as Google AdMob, Firebase Analytics, user login authentication, or cloud payment processing) that may appear in VRYTIS LABS’ broad studio website privacy policy do not apply to KitReturn. Each VRYTIS LABS application operates under its own verified release configuration.

2. Information Processed Locally on Your Device

To fulfill its core functions of equipment lending, return verification, inventory tracking, and borrowing history, KitReturn processes the following information locally on your device:

• Equipment & Asset Records: Equipment names, asset identifiers, serial numbers, asset tags or barcodes, kit groupings, categories, descriptions, custody status, and selected equipment photos.
• Borrower Details: Names and optional contact details (such as phone numbers, email addresses, student/staff ID numbers, or department affiliations) entered directly by the equipment manager or app user.
• Loan & Return Records: Checkout timestamps, scheduled due dates, actual return timestamps, return condition ratings (e.g., good, damaged, missing parts), and custom handover or inspection notes.
• App Preferences: User-selected interface settings, display preferences, and local configuration choices.

This information is processed solely to support equipment lending workflows, audit trails, return scheduling, local backup generation, and user-initiated sharing of loan slips.

Note Regarding Personal Information:Because borrower names, optional contact details, and loan histories are entered into the application, local operations involve personal data. We do not make the blanket claim that “no personal data is processed.” Rather, this personal data is processed and maintained locally on the device by the equipment manager utilizing the app.

3. Storage and Developer Access

All equipment records, kits, transaction logs, and imported photos created or imported within KitReturn are stored in Android app-private internal storage. Under standard Android operating system sandbox rules, this storage sandbox is isolated and inaccessible to other standard applications installed on the device.

• No Account Creation: Account creation and user registration are not features of KitReturn. The app does not operate or require an account system, user login, or cloud identity portal.
• No Developer-Operated Cloud Synchronization: Developer-operated cloud synchronization is not an app feature. KitReturn does not operate a developer database server, cloud sync engine, or background data collector.
• Zero Developer Access to Records: VRYTIS LABS does not automatically receive, collect, view, host, inspect, or sync your equipment database, photos, or borrower records. Your inventory data belongs strictly to you and your organization.

4. Release Configuration and Absence of Trackers

The release of KitReturn (version 1.0.0) is configured with strict privacy boundaries:

• No Advertisements: The application contains no advertising banners, interstitial ads, or sponsored placements.
• No Advertising ID Access: The app does not request, read, or transmit the Google Advertising ID (AAID).
• No Advertising or Monetization SDKs: Third-party advertising libraries (such as Google AdMob, Unity Ads, or similar networks) are completely absent.
• No Background Telemetry or Analytics SDKs: KitReturn does not embed Google Analytics for Firebase, Mixpanel, Segment, or other behavior tracking tools.
• No Cloud AI Processing: The application does not send notes, equipment photos, or borrower names to remote cloud artificial intelligence or machine learning APIs for analysis.

These statements reflect the release configuration of the standalone KitReturn Android application. We do not copy unrelated third-party disclosures (e.g., Firebase, AdMob, payment gateways) into this policy.

5. Photos and File Selection (System Pickers)

When attaching photos to equipment records or selecting locations for backup files, KitReturn utilizes Android’s standard system pickers (such as the Android Photo Picker or Storage Access Framework):

• User-Chosen Content Only: KitReturn only receives access to the specific photo files or document directories that you explicitly select through the system interface.
• No Broad Storage Access: The application does not request or require broad access to your entire photo gallery, device media library, file system, or personal documents.
• No Contacts Access: KitReturn does notrequest Android Contacts permissions. Any borrower contact details are typed manually by the equipment manager into the app’s fields.

Selected photos are copied into the application’s private storage directory so that equipment records remain complete even if the original source image is later modified or removed from external albums.

6. Sharing and Manual Backups (Unencrypted JSON Exports)

KitReturn includes features that allow users to intentionally share loan summaries and export complete database backups:

• User-Initiated Sharing:When completing a checkout or return, you may choose to generate and send a handover summary, receipt, or notification using Android’s native sharing sheet (e.g., via email, messaging apps, or printing). You control when this occurs and which recipient receives the message.
• Manual Database Backups: You can create a full data export containing your equipment catalog, borrower details, checkout histories, and attached photos.
• Destination Selection:When creating an export, you select where the backup file is saved via Android’s file picker. This may be your local Downloads folder, removable storage (SD card/USB), or a cloud document provider configured on your device (such as Google Drive, Microsoft OneDrive, Nextcloud, or Dropbox).
• Third-Party Destination Governance: Once a backup file or summary is transferred outside KitReturn, that copy is governed by the privacy policy, security measures, and terms of service of the receiving application, recipient, or storage provider. VRYTIS LABS has no control over third-party destinations.

7. Android System Backup and Device Migration

Android includes operating-system-level backup features (such as Android Auto Backup for Apps or Google Drive device backup) and device-to-device migration tools used when setting up a new smartphone or tablet:

• Depending on your device manufacturer, Android OS version, backup settings, and the app’s manifest rules, Android may include eligible app-private database files in your personal Google account device backup or during direct device transfers.
• This process is managed entirely by Android and your Google account. It is completely independent of VRYTIS LABS, and VRYTIS LABS has no access to your Google account backups or transferred data.
• Because of these built-in operating system features, as well as user-initiated backups and exports, we do notclaim that application data “never leaves your device.”

8. Data Retention, Deletion, and Equipment Archiving

Because KitReturn operates locally, data retention is controlled entirely by you and your organization:

• Retention Duration: Records, checkouts, and borrower contact details remain on your device for as long as you choose to retain them within the application.
• In-App “Clear All Data” Function:KitReturn provides a “Clear All Data” control within the app’s Settings screen. Confirming this action resets the local database and purges all equipment, borrower records, and transaction histories from the application’s private storage.
• Android Storage Controls: You can delete all local data at any time via your device settings:
  Android Settings → Apps (or Application Manager) → KitReturn → Storage → Clear storage (or Clear data)(Note: Exact menu names and navigation steps may vary slightly depending on your Android version and device manufacturer).
• Uninstallation:Uninstalling KitReturn from your device normally purges the application’s private internal storage, including its database and imported photos.
• Scope of Deletion: Clearing in-app data or uninstalling the app will not delete previously exported JSON backup files, transaction slips shared with borrowers via email/messaging, or Android system backups saved in your cloud storage. Those copies must be deleted manually from their respective storage locations or providers.
• Archiving vs. Deleting Equipment: Within KitReturn, archiving an item is distinct from deleting its historical records. Archiving marks an equipment asset or kit as inactive (removing it from active checkout lists while preserving prior transaction records for organizational audits). In contrast, deleting a record permanently removes it from the local database.
• No Account Deletion Form Needed: Because KitReturn does not utilize user accounts or store records on developer servers, there is no online account to delete. We do not provide an account-deletion web form for this application.

Borrower Inquiries & Privacy Rights:When KitReturn is used by an academic lab, club, maker workshop, or team, the organization or individual operating the app is the controller of the borrower records. Borrowers wishing to inspect, update, or request the deletion of their personal information should contact their equipment manager or organization directly. Because VRYTIS LABS does not have access to users’ devices or databases, we cannot view, modify, or remotely delete local records on behalf of borrowers.

9. Support Communications

If you contact VRYTIS LABS for customer support, technical assistance, or privacy inquiries at admin@vrytislabs.com:

• We receive your email address, your message content, and any diagnostic logs, screenshots, or attachments you voluntarily choose to include.
• We use this information exclusively to communicate with you, investigate reported issues, and provide technical assistance.
• Support correspondence is retained only for the duration necessary to resolve your request, maintain customer service records, and comply with applicable legal or regulatory requirements.
• Information you voluntarily transmit in support emails is distinct from the app’s locally stored operational database. We do not merge support communications with equipment inventories.

10. Security Measures and User Precautions

KitReturn utilizes Android’s internal application sandboxing architecture to isolate app data from other installed software. However, the overall security of equipment inventories and borrower personal data depends significantly on device-level and physical safeguards:

• Device Lock Protection: Equipment managers should enforce strong device lock mechanisms (PIN, passphrase, or biometrics) on devices running KitReturn to prevent unauthorized physical access.
• Backup Storage Security: Users should store exported unencrypted JSON backups in protected locations, such as encrypted storage volumes or access-controlled enterprise drives.
• Realistic Representations: KitReturn does not implement proprietary database encryption layers, does not offer encrypted file export protection, does not claim third-party cybersecurity certifications, and cannot guarantee absolute security against all possible device-level vulnerabilities.

We do not make blanket promises of total legal compliance or guaranteed Google Play approval; instead, we provide transparent disclosures of actual functionality so organizations can evaluate their own compliance obligations.

11. Intended Audience

KitReturn is designed and provided as an operational productivity tool for laboratories, educational workshops, robotics and sports clubs, makerspaces, and organizational equipment custodians. It is not marketed toward or designed for use by unsupervised young children. We do not impose artificial age verification mechanisms or unsupported age restrictions, but we expect equipment checkouts to be administered by responsible organizational managers.

12. Website Disclosures (Visiting vrytislabs.com)

This privacy policy is hosted publicly at https://vrytislabs.com/privacy/kitreturn on the VRYTIS LABS website. Please note the operational distinction between visiting this website and using the offline Android application:

• Hosting & Delivery: This website is hosted using Vercel infrastructure. When you access this webpage via HTTPS, standard web server logs (such as your IP address, browser user-agent, and requested page URL) are processed by the hosting provider to deliver the page securely.
• Privacy-Friendly Web Metrics: The website utilizes privacy-preserving performance telemetry (Vercel Analytics and Speed Insights) to monitor page speed and availability. These metrics do not collect or track data from the KitReturn Android mobile application.
• Public, Read-Only Access: This policy is fully accessible without requiring user login, account registration, payments, geographic restrictions, or application installation. Visitors cannot edit or tamper with the policy text.
• No Third-Party Advertising Trackers: No advertising trackers, cross-site profiling cookies, or third-party marketing beacons are embedded on this policy page.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in KitReturn’s features, Android platform requirements, or applicable regulations. Any revisions will be published directly on this webpage with an updated “Last updated” date.

If a future release introduces new data processing capabilities (such as optional cloud synchronization or automated network reporting), this document will be amended to describe those capabilities before they become operational.

14. Contact Information

For questions, clarifications, feedback, or privacy inquiries regarding KitReturn or this Privacy Policy, please contact VRYTIS LABS: